Alertes, guideset veille WordPress.

Filtre par plugin

a forms

Effacer

Smart Forms – when you need more than just a contact form

MoyenneCVSS 4.4

CVE-2024-1905

XSS stocké, authentifié, dans Smart Forms – when you need more than just a contact form (<= 2.6.95)

Plugin: Smart Forms – when you need more than just a contact form
Versions: <= 2.6.95
CVSS: 4.4/10
Correctif: 2.6.96

8 avr. 2024

Lire

Ninja Forms – The Contact Form Builder That Grows With You

MoyenneCVSS 4.4

CVE-2024-29220

XSS stocké, authentifié, dans Ninja Forms – The Contact Form Builder That Grows With You (<= 3.8.0)

Plugin: Ninja Forms – The Contact Form Builder That Grows With You
Versions: <= 3.8.0
CVSS: 4.4/10
Correctif: 3.8.1

8 avr. 2024

Lire

Forminator Forms – Contact Form, Payment Form & Custom Form Builder

MoyenneCVSS 6.4

CVE-2024-3053

XSS stocké, authentifié (Contributeur+), dans Forminator Forms – Contact Form, Payment Form & Custom Form Builder (<= 1.29.2)

Plugin: Forminator Forms – Contact Form, Payment Form & Custom Form Builder
Versions: <= 1.29.2
CVSS: 6.4/10
Correctif: 1.29.3

8 avr. 2024

Lire

Ninja Forms – The Contact Form Builder That Grows With You

MoyenneCVSS 4.4

CVE-2024-26019

XSS stocké, authentifié, dans Ninja Forms – The Contact Form Builder That Grows With You (<= 3.8.0)

Plugin: Ninja Forms – The Contact Form Builder That Grows With You
Versions: <= 3.8.0
CVSS: 4.4/10
Correctif: 3.8.1

8 avr. 2024

Lire

MoyenneCVSS 4.3

CVE-2024-31270

Défaut de contrôle d'accès dans Contact Form, Survey, Quiz & Popup Form Builder – ARForms (<= 1.6.1)

Plugin: Contact Form, Survey, Quiz & Popup Form Builder – ARForms
Versions: <= 1.6.1
CVSS: 4.3/10
Correctif: 1.6.2

5 avr. 2024

Lire

MoyenneCVSS 4.3

CVE-2024-31272

CSRF (Cross-Site Request Forgery) dans Contact Form, Survey, Quiz & Popup Form Builder – ARForms (<= 1.6.1)

Plugin: Contact Form, Survey, Quiz & Popup Form Builder – ARForms
Versions: <= 1.6.1
CVSS: 4.3/10
Correctif: 1.6.2

5 avr. 2024

Lire

MoyenneCVSS 5.3

CVE-2024-31341

Faille de sécurité dans User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor (<= 3.11.2)

Plugin: User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
Versions: <= 3.11.2
CVSS: 5.3/10
Correctif: 3.11.3

5 avr. 2024

Lire

Formsite | Embed online forms to collect orders, registrations, leads, and surveys

MoyenneCVSS 6.4

CVE-2024-31257

XSS stocké, authentifié (Contributeur+), dans Formsite | Embed online forms to collect orders, registrations, leads, and surveys (<= 1.6)

Plugin: Formsite | Embed online forms to collect orders, registrations, leads, and surveys
Versions: <= 1.6
CVSS: 6.4/10
Correctif: 1.7

5 avr. 2024

Lire

MoyenneCVSS 4.3

CVE-2024-31265

CSRF (Cross-Site Request Forgery) dans Website Pop-up Builder by BDOW! (formerly Sumo): Pop-ups + forms for email opt-ins and lead generation (<= 1.34)

Plugin: Website Pop-up Builder by BDOW! (formerly Sumo): Pop-ups + forms for email opt-ins and lead generation
Versions: <= 1.34
CVSS: 4.3/10
Correctif: 1.35

5 avr. 2024

Lire

Captcha by BestWebSoft – Advanced Spam Protection, Math & OCR-Friendly Captcha for Site Forms

MoyenneCVSS 5.3

CVE-2024-31295

Faille de sécurité dans Captcha by BestWebSoft – Advanced Spam Protection, Math & OCR-Friendly Captcha for Site Forms (<= 5.2.0)

Plugin: Captcha by BestWebSoft – Advanced Spam Protection, Math & OCR-Friendly Captcha for Site Forms
Versions: <= 5.2.0
CVSS: 5.3/10
Correctif: 5.2.1

5 avr. 2024

Lire

Forminator Forms – Contact Form, Payment Form & Custom Form Builder

ÉlevéeCVSS 7.2

CVE-2024-1794

XSS stocké, non authentifié, dans Forminator Forms – Contact Form, Payment Form & Custom Form Builder (<= 1.29.0)

Plugin: Forminator Forms – Contact Form, Payment Form & Custom Form Builder
Versions: <= 1.29.0
CVSS: 7.2/10
Correctif: 1.29.1

29 mars 2024

Lire

MoyenneCVSS 4.4

CVE-2024-30549

XSS stocké, authentifié (Administrateur+), dans Contact Forms by Cimatti (<= 1.8.0)

Plugin: Contact Forms by Cimatti
Versions: <= 1.8.0
CVSS: 4.4/10
Correctif: 1.9.1